Lucene search

K
kasperskyKaspersky LabKLA10265
HistoryJul 17, 2014 - 12:00 a.m.

KLA10265 Multiple vulnerabilities in MySQL

2014-07-1700:00:00
Kaspersky Lab
threats.kaspersky.com
34

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.7%

Detect date:

07/17/2014

Severity:

High

Description:

Unspecified vulnerabilities were found in MySQL Server. By exploiting these vulnerabilities malicious users can affect integrity, confidentiality and availability. These vulnerabilities can be exploited remotely at vectors related to SRCHAR, SRINFOSC and ENFED.

Affected products:

Oracle MySQL Server versions 5.5.37 and earlier
Oracle MySQL Server 5.6 versions 5.6.17 and earlier

Solution:

Update to latest version

Impacts:

OSI

Related products:

MySQL

CVE-IDS:

CVE-2014-42586.5High
CVE-2014-42605.5High
CVE-2014-42432.8Warning

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.7%